The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120500: redimp otterwiki: An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that…6.1 Medium5.3 MediumN/ANov 2, 2026
CVE-2026-115654: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that…N/A6.9 MediumN/ANov 2, 2026
CVE-2026-115653: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a…N/A7.0 HighN/ANov 2, 2026
CVE-2026-114408: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6…N/A8.7 HighN/ANov 2, 2026
CVE-2026-109142: NLnet Labs Krill: When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the…8.4 HighN/AN/ANov 2, 2026
CVE-2026-109141: NLnet Labs Krill: The vulnerability gives a role that is restricted to a list of CAs (cas = [...]) its full permission set for every…8.4 HighN/AN/ANov 2, 2026
CVE-2026-109140: NLnet Labs Krill: The vulnerability is that Krill encrypts every login-session token with a nonce built from a counter that is reset to 0…8.4 HighN/AN/ANov 2, 2026
CVE-2026-104080: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-99242: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The…N/AN/AN/ANov 2, 2026
CVE-2026-99241: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in…N/AN/AN/ANov 2, 2026
CVE-2026-99240: Linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for…N/AN/AN/ANov 2, 2026
CVE-2026-99239: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99238: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99237: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99236: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressions…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99235: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99234: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when…N/AN/AN/ANov 2, 2026
CVE-2026-99233: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99232: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the…N/AN/AN/ANov 2, 2026
CVE-2026-99231: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99230: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in…N/AN/AN/ANov 2, 2026
CVE-2026-99229: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list…N/AN/AN/ANov 2, 2026
CVE-2026-99228: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends…N/AN/AN/ANov 2, 2026
CVE-2026-99227: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99226: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named…N/AN/AN/ANov 2, 2026
226-250 of 574114
‹›